Re: [PHP-DEV] CVS Account Request From: Rasmus Lerdorf (rasmus <email protected>)
Date: 11/15/00

> Granted, there were less, but there were some. I think that the current
> way CVS works is a bit too trusting, especially for new people. I don't
> see a real problem if people send in patches for a few weeks before they're
> granted write access to the source.

This does effectively happen today already. I have committed a number of
patches on behalf of people without giving them cvs accounts when I felt
it was a one-off type of thing. I have also looked at patches and tested
patches and then only after that given someone a cvs account. I don't
mind trying to tighten things a little bit for new people and asking them
to send patches to php-dev, but if these things start going unanswered for
days and we start to lose contributions we need to fix it.

> With the popularity of PHP, there comes some responsibility. I didn't find
> it too much fun at all to have to represent the dev team on bugtraq. The
> bugtraq security bugs were in the core, in some of the concepts of the
> language. I don't want to increase the number of appearances on bugtraq
> beyond the bare minimum.

And again, these things were the result of things done by longtime PHP
contributors and can in no way be blamed on newcomers to the PHP project.
Most of the blame was in fact on my head for those.

-Rasmus 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>